Do you ever fear that someone will do what Sybase did recently - get
wind of some vulnerability you have found and send you a legal notice to
prevent you sharing information with your customers?

This is one of the reasons Open Source software is so much more secure
than closed source software - there's no incentive for an Open Source
software vendor to sue you because you did free work for them. Security
information about Open Source software is freely distributed, and this
helps educate the end users as to their actual risk. With closed source
software, there's no way for a business or an end user to know how much
risk they are at from any particular configuration, which makes it more
expensive to run. Businesses like to be able to know how much risk they
are at. What Sybase really did was not protect their customers, but put
them in a very difficult position. Now Sybase's customers don't know the
full extent of the problem, but they do know Sybase has something to hide.

http://www.smh.com.au/news/Technology/Canvassing-all-security-cracks/2005/04/20/1113854252106.html?oneclick=true
--
Regards,

Marius - Linux admin